CVE-2026-9040 — Mali GPU Kernel Driver allows denial of service or disclosure of sensitive information

Description (CNA)

A race condition vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing operations to cause a denial of service or disclose sensitive information. This issue affects Bifrost GPU Kernel Driver: from r12p0 through r49p5, from r50p0 through r51p0, from r54p1 through r54p2; Valhall GPU Kernel Driver: from r19p0 through r49p5, from r50p0 through r54p3, r55p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r49p5, from r50p0 through r54p3, r55p0.

Affected (CNA)

Vendor / product	Versions
Arm Ltd / Bifrost GPU Kernel Driver	affected r12p0 through r49p5; affected r50p0 through r51p0; affected r54p1 through r54p2
Arm Ltd / Valhall GPU Kernel Driver	affected r19p0 through r49p5; affected r50p0 through r54p3; affected r55p0; unaffected r56p0
Arm Ltd / Arm 5th Gen GPU Architecture Kernel Driver	affected r41p0 through r49p5; affected r50p0 through r54p3; affected r55p0; unaffected r56p0

CWE

CWE-362

References

https://support.arm.com/documentation/111552/1-0/?lang=en

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.